Ask the Expert: Troubleshooting Crashes in the Adaptive Security Appliances (ASA)

[Monica Lluis]

This session will provide an opportunity to learn and ask questions about how to troubleshoot issues with the Cisco Adaptive Security Appliance (ASAs), such as crashes, high CPUs, and other common issues. To participate in this event, ask your questions below by clicking on the "reply" button. 

Ask questions from Monday May 2nd  to Friday May 13, 2016

Featured Experts

Puneesh Chhabra is a Customer Support Engineer in the Cisco High-Touch Technical Services (HTTS) team based in  Bangalore, India. He has total of 8 years of experience in network security. He has delivered multiple trainings on Cisco firewalls and VPN solutions. Prior to joining Cisco, he worked at IBM and HCL as network security consultant. Chhabra holds bachelor of Science degree in Computer Sciences from Kurukshetra University. He has achieved his CCIE certification in Security. (CCIE Security #30128)

Aditya Ganjoo is a Customer Support Engineer in the Cisco High-Touch Technical Services (HTTS) team based in  Bangalore, India.He has been working with TAC from past 5 years in Security domains like Firewall, VPN and AAA. Aditya has delivered trainings on ASA and VPN technologies.Aditya holds a Bachelor's degree in Information Technology College – M.I.E.T College of Engineering and Technology from University of Jammu.He has achieved certifications for CCNA, CCNA-Security and is currently pursuing CCIE Security

Find other  https://supportforums.cisco.com/expert-corner/events.

** Ratings Encourage Participation! **
Please be sure to rate the Answers to Questions

To ask your question, please use the reply button below.
 

[Puneesh Chhabra]

Hi Suman,

Recommendations are made post complete assessment of network.  You can consult with your Cisco accounts representative for this.

I cannot make suggestion or recommendations on a particular code here, however you can go to the latest image, it will have most number of bug fixes or check the release notes available, it will show you the caveats resolved (so you can assess if those are applicable to your network).

Regards,

Puneesh

Please rate helpful posts

[Suman Kumar]

Hi Puneet,

we are facing a very strange issue, we have cisco asa 5525 9.5.2, from couple of days we are seeing the access rules are getting deleted automatically, do you have any idea why this is happening ?

[Aditya Ganjoo]

Hi Suman,

Please share the following info:

show ver

show memory

show access-list | in elements

show blocks

fsck flash:

Regards,

Aditya

Please rate helpful posts and mark correct answers.

[Suman Kumar]

please find the same in attachment

[Aditya Ganjoo]

Hi Suman,

It seems the flash of the device is facing issues.

This seems to be matching a known defect :

https://tools.cisco.com/bugsearch/bug/CSCuw95262/?reffering_site=dumpcr

This bug has not been fixed and the only workaround is to reload the ASA.

Regards,

Aditya

Please rate helpful posts and mark correct answers.

[MKH]

Hello

We have 2 ASA(5585-X) in Cluster mode running asa962-7-smp-k8.bin. suddenly Master unit has failovered in 31 August 2017 and all session have killed Subsequently. After that in 1 september 2017 Standby unit suddenly has failovered and master unit has activated.
We are interested in why Active unit reloaded , is there any relation it could break the HA? I have attached crashinfo file.

Also is there any solution to analyze the crashinfo of ASA for ordinary cases ?

Thank you.

[lotfiabbas]

hi sir

sir i am experiencing a reboot  of ASA firewall 5512-X  after  3 to 4 days

when i issue show crashinfo module 0 command

it gives me dump errors and threads

pls can u tell me how to troubleshoot that so that asa firewall is not rebooted

[lotfiabbas]

mY ASA  5512-x version is 9.1(2)

[lotfiabbas]

sir my thread is attached 

thank u 

i am reachable at lotfi_abbas@hotmail.com

thank u sir